The US has indicted two developers of Tornado Cash, a cryptocurrency mixer, for aiding criminals in money laundering. According to the federal authorities, Roman Storm and Roman Semenov conspired in circumventing sanctions and assisting hackers in laundering over $1 billion in cryptocurrency. While Storm was arrested in Washington, Semenov, a Russian national, is still on the run.

Mandiant warns of attacks on newly-disclosed Ivanti remote takeover threat
Google’s Mandiant team has issued an alert about a remote code execution flaw in the Ivanti Connect Secure VPN platform. The vulnerability, designated CVE-2025-22457, is